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of  Technology,  Cambridge,  Mass.,  USA 

Abstract .  A  methodology  for  analyzing  and  assessing  the  effectiveness  of 
command,  control  and  communications  (C3 )  systems  is  developed.  The  analysis 
is  carried  out  by  characterizing  separately  both  the  system  and  the  mission 
in  terms  of  attributes.  These  attributes  are  determined  as  functions  of 
primitives  that  describe  the  system,  the  mission,  and  the  context  within 
which  both  operate.  Then  the  system  capabilities  and  the  mission  require¬ 
ments  are  compared  in  a  common  attribute  space.  This  comparison  leads  to 
the  evaluation  of  partial  measures  of  effectiveness  which  are  then  combined 
to  yield  a  global  measure.  The  methodology  is  illustrated  through  the  as¬ 
sessment  of  the  effectiveness  of  a  communications  network  operating  in  a 
hostile  environment. 


INTRODUCTION 

System  effectiveness  is  an  elusive  concept 
that  encompasses  technical,  economic,  and 
behavioral  considerations.  When  the  system 
to  be  evaluated  is  one  which  provides  a  ser¬ 
vice,  such  as  a  command,  control  and  commu¬ 
nications  (C3)  system,  then  the  needs  of  the 
organization  that  uses  it  must  be  taken  into 
account.  Furthermore,  the  worth  of  the  ser¬ 
vice  it  provides  may  change  in  value  as  mis¬ 
sions  change,  as  technologies  change  and  as 
the  opponent's  capabilities  change.  Thus,  any 
methodology  that  is  proposed  for  C3  system  ef¬ 
fectiveness  analysis  must  be  sufficiently  broad 
and  flexible  so  that  it  can  accommodate  change 
and  can  evolve  over  time. 

Such  a  methodology  is  proposed  in  this  paper. 
The  analytical  aspects  of  the  methodology  ad¬ 
dress  mainly  the  relationships  between  compo¬ 
nent  characteristics,  system  structure,  and 
operating  procedures  to  system  availability 
and  performance.  Availability  is  defined  as 
a  probabilistic  quantity  dependent  on  the 
random  failure  characteristics  of  system  com¬ 
ponents  (whether  or  not  due  to  enemy  action) . 
System  performance  denotes  the  ability  to 
achieve  appropriate  operational  goals  for  a 
given  availability  state  [Fink ,  1980] .  It 
is  assumed  that  the  cost  associated  with  any 
system  realization  and  operation  can  be  com¬ 
puted:  the  total  cost  may  reflect  the  costs 
for  developing  and  implementing  the  system 
and  the  costs  for  Operating  and  maintaining 
it.  Finally,  the  assessment  of  worth  is  left 
for  the  final,  and  subjective  stage  of  the 
methodology,  since  worth  is  a  relative  mea¬ 
sure  that  involves  value  judgements  [Dersin 
and  Levis,  1981] . 


In  analyzing  the  effectiveness  of  a  C3  system, 
it  is  essential  that  the  diversity  of  users 
and  types  of  services  demanded  be  taken  into 
account.  Also,  the  tolerances  associated 
with  each  system  characteristic  or  attribute 
must  be  established  so  that  the  adequacy 
of  the  service  provided  by  a  given  system 
realization  can  be  evaluated. 

The  basic  premise  of  the  methodology  is  that 
a  C3  system  provides  a  variety  of  services 
(or  supports  a  variety  of  functions) .  The 
complementary  premise  is  that  each  user 
imposes  on  a  C3  system  a  load  which  is  gener¬ 
ated  from  a  need  for  service  that  the  system 
may  or  may  not  be  able  to  satisfy.  Thus,  on 
one  side,  there  is  the  C3  system  with  a  range 
of  capabilities  for  providing  service,  while 
on  the  other  is  the  military  organization 
with  its  diverse  needs  for  service.  There¬ 
fore,  the  first  step  of  the  methodology  is 
based  on  the  ability  to  model  the  system's 
capabilities  and  the  organization's  require¬ 
ments  in  terms  of  commensurate  attributes. 
This  and  the  other  steps  in  the  methodology 
aure  described  in  the  next  section.  In  the 
third  section,  an  illustrative  example  is 
presented. 

SYSTEM  EFFECTIVENESS  ANALYSIS 

The  methodology  outlined  in  this  section  is 
based  on  six  concepts:  system,  mission , 
context,  primitives,  attributes,  and  mea¬ 
sures  of  effectiveness.  The  first  three 
describe  the  problem,  while  the  last  three 
define  the  key  quantities  in  the  analytical 
formulation  of  the  problem. 

The  system  consists  of  components,  their 
interconnection  and  a  set  of  operating  pro- 


cedures.  A  naval  communications  system,  a 
computer  network  or  a  testbed  are  typical 
systems.  The  system  can  be  centralized 
(e.g.,  a  testbed  facility)  or  decentralized 
(e.g.,  a  computer  network). 

The  mission  consists  of  a  set  of  objectives 
and  tasks  that  the  military  organization  is 
assigned  to  accomplish.  The  description  of 
the  mission  must  be  as  explicit  and  specific 
as  possible  so  that  it  can  be  modeled  analyt¬ 
ically.  For  example,  a  mission  specification 
such  as  "to  defend  the  West  Coast  of  the  US" 
is  too  broad,  while  a  more  useful  specifica¬ 
tion  would  be  "to  detect  enemy  submarines 
off  the  cost  of  California" . 

The  context  denotes  the  set  of  conditions  and 
assumptions,  i.e.,  the  environment,  within 
which  the  mission  takes  place  and  the  system 
operates.  For  example,  the  context  may  in¬ 
clude  specification  of  the  geographical  area, 
the  time  of  the  year,  and  the  prevailing  set 
of  international  agreements. 

Primitives  are  the  variables  and  parameters 
that  describe  the  system  and  the  mission.  For 
example,  in  the  case  of  a  communications  net¬ 
work,  primitives  may  include  the  number  of 
links  and  nodes,  the  capacity  of  each  link, 
and  the  probability  of  failure  of  each  link. 
Primitives  of  a  mission  may  be  the  designation 
of  origin-destination  pairs,  the  data  flow 
rate  between  these  points,  and  the  duration 
of  each  transmission.  Let  the  system  primi¬ 
tives  be  denoted  by  the  set  {x,}  and  the  mis¬ 
sion  primitives  by  the  set  {y_.I. 

Attributes  are  quantities  that  describe  system 
properties  or  mission  requirements.  System 
attributes  for  a  communications  system  may 
include  reliability,  average  delay,  and  sur¬ 
vivability.  Mission  attributes  are  expressed 
as  requirements  for  the  same  quantities  as 
the  system  attributes,  e.g.,  minimum  reli¬ 
ability,  maximum  average  delay,  or  minimum 
survivability.  The  system  attributes  are 
denoted  by  the  set  {a  }  and  the  mission  at¬ 
tributes  by  {a  } . 

m 

Measures  of  Effectiveness  are  quantities  that 
result  from  the  comparison  of  the  system  and 
mission  attributes.  They  reflect  the  extent 
to  which  the  system  is  well  matched  to  the 
mission. 

These  six  concepts  are  the  key  components  of 
the  methodology  for  analyzing  and  assessing 
the  effectiveness  of  C3  systems. 

The  first  step  of  the  methodology  consists 
of  the  selection  of  the  set  of  system  primi¬ 
tives.  By  definition,  the  elements  of  the 
set  are  mutually  independent.  In  this  sense, 
the  primitives  are  the  independent  variables 
in  the  analytical  formulation  of  the  method¬ 
ology. 

The  second  step  consists  of  defining  attributes 
for  the  system  that  characterize  the  properties 
that  are  of  interest  in  the  analysis.  The 


attributes  are  expressed  as  functions  of  the 
primitives.  The  values  of  the  attributes 
could  be  obtained  from  the  evaluation  of  a 
function,  from  a  model,  a  computer  simulation, 
or  from  empirical  data.  Each  attribute  de¬ 
pends,  in  general,  on  a  subset  of  the  primi¬ 
tives,  i.e., 

As  =  fs  (xi . xk}  U) 

Attributes  may  or  may  not  be  independent  from 
each  other.  They  are  dependent,  if  they 
have  primitives  in  common.  A  system  realiza¬ 
tion  results  in  the  set  of  primitives  taking 
specific  values  {x,}.  Substitution  of  these 
values  in  the  relationships  (1)  yields  values 
for  the  attribute  set  {a  }.  Thus,  any  spe¬ 
cific  realization  can  be  depicted  by  a  point 
in  the  attribute  space. 

The  third  and  fourth  steps  consist  of  carry¬ 
ing  out  a  similar  analysis  for  the  mission: 
Selection  of  the  primitives  that  describe 
the  variables  and  parameters  of  the  mission 
and  definition  of  the  mission  requirements. 
Then  models  are  selected  that  map  the  primi¬ 
tives  y^  into  the  attributes: 

Am  =  fm  (yi . y£>  (2) 

Some  of  the  mission  attributes  may  be  inter¬ 
related  through  dependence  on  common  primi¬ 
tives,  It  is  also  possible  to  introduce 
directly  some  constraints  between  the  attri¬ 
butes,  e.g.,  a  trade-off  relationship  between 
delay  and  accuracy.  However,  it  is  prefer¬ 
able  that  such  trade-off  relationships  be 
derived  through  the  functions  or  models  that 
define  attributes  or  requirements  in  terms 
of  the  mission  primitives.  Specification 
of  values  for  the  mission  primitives  results 
in  a  point  or  region  in  the  mission  attri¬ 
bute  space. 

The  two  spaces,  the  system  attribute  space 
A  and  the  mission  attribute  space  A  ,  al¬ 
though  of  the  same  dimension,  may  bemdefined 
in  terms  of  different  attributes,  or  attri¬ 
butes  scaled  differently.  Therefore,  the 
fifth  step  consists  of  transforming  the 
system  and  mission  attributes  into  a  set  of 
common,  commensurate  attributes  that  define 
a  common  attribute  space  A.  For  example, 
one  of  the  system  attributes  may  be  vulner¬ 
ability,  while  the  corresponding  mission 
attribute  may  be  survivability.  Since  they 
both  reflect  the  same  concept  —  the  effect 
of  hostile  actions  —  one  of  them  may  be 
chosen  as  the  common  attribute,  say,  surviv¬ 
ability,  while  the  other  one  will  then  be 
mapped  into  the  first  one.  Once  the  com¬ 
mon  set  of  attributes  has  been  defined,  the 
two  sets  (a  }  and  (a  }  sure  transformed  into 
commensurate  sets  that  can  be  depicted  in 
the  common  attribute  space  A. 

A  possible  additional  operation  in  this  step 
is  the  normalization  of  the  various  commen¬ 
surate  attributes  so  that  their  values  are 
in  the  range  10,1].  If  all  the  attributes 
sire  normalized  in  this  manner,  then  the 


common  attribute  space  is  the  unit  hypercube. 
This  is  very  useful  in  depicting  graphically 
the  loci  of  the  sets  {a  }  and  {a  }  and  in 
analyzing  their  interrefationships . 

The  sixth  step  is  the  key  one  in  analyzing  the 
effectiveness  of  a  C3  system  in  view  of  the 
mission  that  is  to  be  carried  out.  It  consists 
of  procedures  for  comparing  the  system  and 
mission  attributes  through  the  geometric  prop¬ 
erties  of  two  loci  in  the  attribute  space. 
Consider  first  all  the  allowable  values  that 
the  primitives  of  a  specific  realization  of 
the  system  may  take.  If  the  primitives  are 
allowed  to  vary  over  their  admissible  ranges, 

then  the  variations  define  a  locus  L  in  the 

s 

attribute  space.  Similarly,  a  mission  locus 
Lm  can  be  constructed.  Both  loci  are  defined 
in  the  unit  hypercube.  The  geometric  relation¬ 
ship  between  the  two  loci  can  take  one  of 
three  forms: 

(a)  The  two  loci  do  not  have  any  points 
in  common,  i.e.,  the  intersection 

of  L  with  L  is  null: 
s  m 

L  n  L  =  <J>  (3) 

s  m 

In  this  case,  the  system  attributes  do  not 
satisfy  the  mission's  requirements  and  one 
would  define  the  effectiveness  to  be  zero, 
regardless  of  which  specific  measure  is  used. 


requirements  of  the  mission.  This  is  consis¬ 
tent  with  the  interpretation  given  in  case 

(b) .  The  second  interpretation  is  that  the 
use  of  this  system  for  the  given  mission 
represents  an  inefficient  use  of  resources 
since  the  system  capabilities  exceed  the 
mission  requirements.  Inefficiency,  in  turn, 
implies  lower  effectiveness. 

If  the  system  locus  is  included  in  the  mis¬ 
sion  locus,  then  the  system's  effectiveness 
is  identically  equal  to  unity. 

The  measure  of  effectiveness  given  by  (6)  is 
one  of  many  partial  measures  that  can  be 
defined  in  the  common  attribute  space.  Let 
these  partial  measures  be  denoted  by  {Er} . 

To  combine  these  partial  measures  into  a 
single  global  measure,  utility  theory  may  be 
used  [Debreu,  1958;  Fhlips,  1974].  The  k 
partial  measures  Elf...,Ek  are  now  considered 
to  be  the  arguments  of  a  utility  function  u. 
However,  for  the  valid  application  of  utility 
theory,  the  arguments  of  u  must  belong  to 
the  positive  orthant  of  R^,  i.e.,  they  should 
take  values  in  [0,+  °°).  For  this  to  happen, 
each  Er  that  takes  values  in  [0,1)  is  mapped 

to  an  E  that  takes  values  in  [0,+  °°).  Many 
functions  exist  for  transforming  the  bounded 
variables  E  to  the  unbounded  ones;  typical 
examples  are 

-  log  (1-E)  ;  E/l-E  ;  tanh_1E 


(b)  The  two  loci  have  points  in  common, 
but  neither  locus  is  included  in 
the  other: 

L  Pi  L  /  <fr  (4) 

s  m 

and 

LsULm  >Ls  <5) 

In  this  case,  a  subset  of  the  values  that  the 
system  attributes  may  take  satisfies  the  mis¬ 
sion  requirements.  Many  different  measures 
can  be  used  to  describe  the  extent  to  which 
the  system  meets  the  requirements.  Each  of 
these  measures  may  be  considered  as  a  measure 
of  effectiveness  which,  if  normalized,  takes 
values  in  the  open  interval  (0,1),  For  example, 
let  v  be  a  measure  in  the  normalized  attribute 
space.  Then  an  effectiveness  measure  can  be 
defined  by 

J> 

E  =  V(L  O  L  )/V(L  )  (6) 

s  m  s 

which  emphasizes  how  well  matched  the  system 
is  to  the  mission. 


(c)  The  mission  locus  is  included  in 
the  system  locus: 


l  n  l 

s  m 


(7) 


In  this  case,  it  follows  from  (7)  that  L  is 
larger  then  L  and,  consequently,  the  ra€io 
defined  by  (6?  will  be  less  than  unity.  This 
result  can  be  interpreted  in  two  ways.  First, 
only  certain  system  attributes  values  meet  the 


tan(TTE/2)  ;  E°Vl-E® 

Each  of  these  mappings  tends  to  emphasize 
different  segments  of  the  range  [0,1)  and 
therefore  weight  in  a  different  way  the 
partial  effectiveness  measures  E  .  There¬ 
fore,  the  subjective  judgements  of  the 
system  designers  and  the  users  can  be  in¬ 
corporated  directly  into  the  methodology  in 
three  ways:  (a)  by  choosing  different  par¬ 
tial  measures,  (b)  by  choosing  the  mapping 
function,  and  (c)  by  selecting  a  utility 
function.  The  global  effectiveness  measure 
is  obtained,  finally,  from 

E  =  u  (l1,g2,,,.,Ek)  (8) 

The  seven  steps  of  the  methodology  and  their 
interrelationships  are  shown  schematically 
in  Figure  1.  The  diagram  emphasizes  that 
the  system  and  the  mission  must  be  modeled 
and  analyzed  independently,  but  in  a  common 
context.  The  system  capabilities  should  be 
determined  independently  of  the  mission  and 
the  mission  requirements  should  be  derived 
without  considering  the  system  to  be  assessed. 
Otherwise,  the  assessment  is  biased. 

The  methodology  will  be  illustrated  in  the 
next  section  through  application  to  a  com¬ 
munications  network  operating  in  a  hostile 
environment . 


SYSTEM  CONTEXT  MISSION 


Figure  1.  The  Methodology  for  System 
Effectiveness  Analysis 


ASSESSMENT  OF  A  C3  NETWORK 

Consider  the  communications  network  presented 
in  Figure  2.  It  consists  of  seven  nodes  and 
thirteen  links.  The  nodes  represent  infor¬ 
mation  collection  and  transmission  centers  or 
decision  centers  or  both.  The  network  is 
assumed  to  be  part  of  a  C3  system  operating  in 
a  hostile  environment.  Specifically,  it  is 
assumed  that  the  links  are  subject  to  jam¬ 
ming  that  disrupts  communication  between  nodes. 
There  are  twenty-one  possible  origin-desti¬ 
nation  pairs  in  this  network;  only  the  pair 
(1,7)  will  be  used  because  the  subsystem  it 
defines  is  equal  to  the  whole  network.  Multi¬ 
ple  pairs  can  be  analyzed  if  each  pair  is 
considered  as  a  subsystem. 


Figure  2.  A  Simple  Communications 
Network. 


The  context  for  this  network  determines  the 
environment  in  which  the  system  will  operate: 
geographical  location,  climatic  conditions, 
enemy  capabilities  and  resources.  The  con¬ 
text  determines  many  of  the  primitives  of 
both  the  system  and  the  mission. 

The  mission  is  defined  in  terms  of  the  objec¬ 
tives  and  tasks  assigned  to  each  node  by  the 
tactical  plan.  Let  the  aspect  of  the  mission 
that  is  relevant  to  the  pair  (1,7) ,  denoted 
by  (A,B)  from  now  on,  be  the  collection  of 
target  information  at  node  A  and  its  trans¬ 
mission  to  node  B  where  the  weapon  system 
is  located. 

Attributes 


In  one  of  the  definitions  of  C3  systems 
tAFM  1-1,1979]  it  is  stated  that  "Command 
and  control  systems  must  provide  the  com¬ 
mander  with  communications  networks  that  are 
reliable  rapid,  survivable  and  secure."  The 
first  three  requirements  motivated  the  defi¬ 
nition  of  the  attributes  for  this  example: 
reliability,  time  delay,  and  survivability. 

A  fourth  one  that  characterizes  the  amount 
of  information  that  can  be  transmitted  be¬ 
tween  A  and  B  is  the  input  flow. 

The  attribute  Reliability  denotes  the  cap¬ 
ability  of  the  system  to  deliver  a  message 
from  A  to  B  when  only  the  intrinsic,  physical 
characteristics  of  the  components  (links) 
are  taken  into  account.  The  relevant  system 
primitive  is  the  probability  of  failure,  1-p, 
of  each  link,  where  it  is  assumed  that  link 
failures  are  independent  events.  Survivability 
is  defined  as  the  ability  of  the  network  to 
continue  functioning  in  the  presence  of  jam¬ 
ming.  The  system  survivability  depends  on 
the  probability  that  the  enemy  attempts  to 
jam  a  link  (or  links)  and  the  probability 
that  the  link  is  jammed  when  attacked.  Both 
reliability  and  survivability  are  special 
cases  of  availability.  The  distinction  be¬ 
tween  reliability  and  survivability  is  that 
the  former  reflects  the  failure  characteris¬ 
tic  of  components  and  the  effect  of  the 
environment,  while  the  latter  models  the 
effect  on  the  network  of  the  enemy ' s  elec¬ 
tronic  warfare  capability. 

The  attribute  Time  Delay  introduces  the  no¬ 
tion  of  timeliness  of  the  transmitted  infor¬ 
mation  and  the  rapidity  with  which  it  is 
transmitted.  This  attribute  is  critical 
because  in  many  instances  target  acquisition 
by  a  weapon  system  depends  on  the  speed  with 
which  tracking  information  is  received  from 
distant  sensors.  For  this  network,  time 
delay  between  nodes  A  and  B  is  defined  as 
the  sum  of  the  delays  in  each  link  of  a  path 
from  A  to  B,  The  time  delay  is  related  to 
the  capacity  of  each  link.  Therefore,  link 
capacity  is  a  system  primitive. 

Input  Flow  is  defined  as  the  amount  of  data 
transmitted  from  A  to  B,  The  underlying 
assumption  is  that  as  more  tracking  data  are 
collected  and  transmitted  to  the  weapon 
system,  the  target  acquisition  is  improved. 


The  input  flow  that  can  be  transmitted  depends 

on  the  link  capacities  and  the  network  topology;  v.  ,  >•>  2,.  .2.  . 

...  .  i  h  =  1  -  (1-p  (2-p)  )  (1-p) 

it  depends  also  on  the  time  delay,  i.e.,  there 

is  an  interrelationship  between  delay  and  flow,  1 


Let  the  mission  be  the  protection  of  platforms 
located  at  the  network  nodes  by  weapon  systems 
located  at  node  B,  where  the  sensors  are  lo¬ 
cated  in  a  platform  denoted  by  node  A,  There¬ 
fore,  the  objective  of  the  platform  at  A  is 
to  detect  and  identify  enemy  targets  and  com¬ 
municate  that  information  to  the  weapon 
systems.  The  objective  of  node  B  is  to  destroy 
at  least  m  percent  of  the  enemy  targets  while 
suffering  no  more  than  n  percent  losses. 
Therefore,  mission  primitives  are  the  level 
of  forces  of  the  two  opponents,  the  single  shot 
kill  probabilitites ,  the  time  interval  between 
salvos,  the  radius  of  uncertainty  in  locating 
a  target,  and  the  relative  velocity  between  the 
targets  and  the  weapon  systems.  With  these 
primitives,  it  is  necessary  to  determine 
conditions  on  the  attributes  that  will  imply 
the  success  of  the  assigned  mission.  Now  that 
the  overall  situation  has  been  described,  the 
seven  steps  of  the  methodology  can  be  applied. 


The  failure  probabilities  of  the  links  are 
likely  to  vary  with  time.  Since  the  p  takes 
values  in  the  interval  [0,1],  it  follows 
that  R,  a  continuous  function  defined  on  a 
closed  set,  takes  minimum  and  maximum 
values.  Furthermore,  if  p  takes  values  in 
the  subinterval  [a,b]  then  R  takes  its 

minimum  value  R  .  for  p=a  and  its  maximum 
mm  * 

R  for  p=b.  Therefore,  the  reliability 
max 

index  R  in  eq.  (11)  is  an  increasing  func¬ 
tion  of  its  argument  p.  If  the  bounds  a  and 
b  are  known,  then  the  system  reliability  is 
bounded  by 


R  .  <  R  <  R 

mm—  —  max 


(12) 


While  survivability  depends  on  totally  dif¬ 
ferent  primitives,  the  analysis  is  identical 
with  that  for  reliability,  but  with  the  prob¬ 
ability  p  replaced  by 


Step  1  and  2:  system  Attributes 


1 


e.q. 

11 


Structural  analysis  models  based  on  engineering 
reliability  theory  [Barlow  and  Proschan,  1975] 
and  network  theory  [Ford  and  Fulkerson,  1962] 
can  be  used  to  model  the  reliability  attribute 
and  compute  its  value. 

Let  x.  be  a  binary  variable  indicating  whether 
link  i  is  functioning  (x.=l)  or  has  failed 
(x^=0) .  Similarly,  the  feinary  variable  4> 
specifies  the  state  of  the  communication  be¬ 
tween  nodes  A  and  B.  If  the  state  of  the  com¬ 
munication  is  determined  completely  by  the 
state  of  the  links,  then 

<f>  =  <j>(x1,x2,...,x13)  (9) 

The  function  41  is  called  the  structure  function 
of  the  communication  pair  A,B.  If  p.  denotes 
the  probability  the  link  i  is  functioning,  i.e., 

p^  =  prob  (x^l) 

then  the  reliability  index  R  is  defined  as  the 
expected  value  of  the  structure  function: 

R  =  E  [<j)(x1,x2,...,x13)]  (10) 


where  e.  is  the  probability  that  the  enemy 
attacks  link  i  and  q,  is  the  probability 
that  link  i  is  jammed  when  attacked.  If 
the  probability  of  survival  of  a  link  takes 
values  in  the  interval  [a',b'],  it  follows 
that  the  survivability  index  is  bounded  as 
follows: 


S  .  <  S  <  S 

mm —  —  max 


(13) 


Queueing  theory  is  used  to  model  the  time 
delay  in  the  communications  network,  spe¬ 
cifically,  the  M/M/1  model  [Schwartz,  1977] 
was  used  to  determine  the  delay  in  trans¬ 
mitting  packets  from  A  to  B.  Let  the  capac¬ 
ity  of  each  link  in  the  network  of  Figure  2 
be  denoted  by  C^,  with  k  =  1,2, ... ,13 .There 
are  thirty  different  paths  that  can  be  chosen 
to  transmit  a  packet  from  A  to  B  and ,  there¬ 
fore,  thirty  time  delays,  one  for  each  path, 
can  be  computed.  If  path  tt  ,  is  chosen,  then 
the  total  delay  along  this  $ath  is 
[Bouthonnier,  1982] 


C,  £TT  . 
*  3 


*V*P 


(14) 


For  simplicity,  let  all  the  link  failure  prob¬ 
abilities  be  equal.  Then  the  reliability 
index  for  the  pair  A,B  in  the  network  defined 
in  Figure  2  is  given  as  follows: 

R  =  h  (p)  [l-U-h  (p))Cl-h  (p)  h  (p))] 


where  1/y  is  the  mean  number  of  bits  per 
packet  and  F  is  the  input  flow  from  A  to  B. 
Clearly,  there  will  be  a  minimum  and  maximum 
delay  over  the  thirty  paths.  So,  depending 
on  the  routing  algorithm  chosen,  the  delay  T 
may  be  bounded  as  follows: 


where 


(ID 


T  .  <  T  <  T 

mm  —  —  max 


(15) 


-  2 

2p  + 


2p 


,  4 
5p  4 


2p 


Now  let  all  the  link  capacities  be  equal 

to  C  and  let  C  vary  between  C  .  and  C 

J  mm  max 

Then,  for  the  network  of  Figure  2,  the  total 
delay  from  A  to  B  satisfies  [Bouthonnier, 
1982]  : 


tion  rates  a  and  b,  respectively. 


y  C  -F  — 
max 


<  T  < 


y  c  .  -F 
mm 


(16) 


The  last  condition  relates  two  of  the  attri¬ 
butes/  Time  Delay  and  Input  Flew.  In  order 
to  normalize  these  attributes  so  that  they 
vary  between  0  and  1,  the  following . scaling 
factors  are  introduced: 

★ 

T  =  maximum  duration  of  mission 


f  =  y  c 


(17) 


Solution  of  the  differential  equations  (23)/ 
(24)  leads  to  the  "square-law"  attrition 
process: 

ay2(t)  -  b  x2(t)  =  ay2  (0)  -  bx2(0)  (25) 


Substitution  of  conditions  (21)  and  (22)  in 
(25)  yields  a  condition  on  the  attrition 
rates : 


b 

a 


> 


y2(0) 

x2(0) 


(26) 


Then  the  normalized  attributes  are 

t  =  T/T*  (18) 

and 

K  =  F/F*  (19) 


and  relation  (16)  takes  the  form 

*  *  *  * 

2/T  F  <  t<  6/T  F 

1-k  —  —  C  . 

mm  (20) 

5  K 

max 

Thus/  inequalities  (13) ,  (14) ,  and  (20)  define 
the  system  locus  L  in  the  four- dimensional 
unit  hyper cube. 


The  attrition  rate  b  was  defined  in  (24)  as 
p  /t  .  Let  r  be  the  kill  radius  of  blue's 
weapon  system  and  let  p  denote  the  radius  of 
uncertainty  in  locating  red  targets.  Then 
2  2 

Px  =  Ttr  /irp  (27) 


The  value  of  p  depends  not  only  on  the  sur¬ 
veillance  systems,  but  also  on  the  ability  of 
the  network  to  transmit  surveillance  data  about 
a  moving  target  accurately  and  quickly  to  node 
B,  The  radius  of  uncertainty  is  assumed  to  be 
given  by  the  following  function  of  S,R,F,  and  T: 


P  =  i+i  rf10c<1-*9F> 


VT] 


(28) 


where  c  is  the  radius  of  uncertainty  due  to 
the  surveillance  system  alone  and  v  is  the 
relative  speed  to  the  red  target. 


Steps  3  and  4:  Mission  Attributes 

Let  x(t)  denote  the  number  of  blue  forces  and 
y(t)  the  number  of  red  forces.  The  desirable 
conditions  for  blue  arg  that  at  the  end  of 
the  mission  (at  time  T  ) , 


Introduction  of  the  normalized  variables  K 
and  t,  substitution  of  (27)  and  (28)  in  (26) , 
and  some  algebraic  manipulations  yield  the 
following  requirement  for  the  mission  attri¬ 
butes: 


X  (T  )/x(0)  >  n 


(21) 


S  +  R  +  C^K  -  C2t  >  c3 


(29) 


y(T  )/y(0)  £  m 


where  and  c  are  coefficients  dependent 

on  a,m,n,c,T*,F*,x'(0)  and  y(0)  . 


where  n  and  m  are  positive  numbers  in  the 
interval  [0,1) .  a  model  is  needed  that  de¬ 
scribes  the  engagement.  For  this  example,  the 
Lanchester  combat  model  that  describes  the 
"salvo  fire"  engagement  was  chosen  for  its 
simplicity  rather  than  its  realistic  depiction 
of  naval  engagements.  War  games  or  extensive 
simulations  could  be  used  to  analyze  the  mis¬ 
sion  in  some  detail  and  obtain  realistic 
estimates  of  the  requirements. 

In  the  "salvo  fire"  engagement  model  each  blue 

(red)  unit  fires  every  t  (resp.  t  )  time  units 

at  random  at  red  (blue)  units.  Le?  p  (p  )  be 

x  y 

the  single  shot  probability  of  kill  of  a  red 
(blue)  unit  by  a  blue  (red)  unit.  If  the 
single  shot  probabilities  are  small  [Mangulis, 
1980]  then  the  Lanchester  model  reduces  to 


(Py/ty)  y  “  -  ay 

(23) 

(Px/tx)  x  «=  -  bx 

(24) 

where  the  ratios  of  the  kill  probability  to 
the  interval  between  salvos  denote  the  attri- 


The  mission  locus,  L  ,  is  defined  then  as  the 
portion  of  the  four -Simens ional  unit  hyper- 
cube  bounded  by  the  hyperplane  (29) . 

Step  5:  The  System  and  Mission  Loci 

In  the  previous  four  steps,  the  inequalities 
defining  the  two  loci  were  derived.  Numerical 
values  must  be  selected  now  so  that  the  loci 
can  be  specified  completely  and  the  assess¬ 
ment  of  effectiveness  carried  out. 

Let  the  probability  of  a  link  failing,  1-p, 
range  from  0.607  to  0.630  and  let  the  prob¬ 
ability  that  a  link  will  be  jammed  vary  over 
the  same  range.  Then,  inequalities  (12)  and 
(13)  become: 


0.4  1 

R  £  0.45 

(30) 

0.4  £ 

S  £  0.45 

(31) 

while  (20) 

becomes 

°rl< 

<  0.3 

(32) 

1-k  - 

-  0.7-k 

if  (3 


Fit*.  5  Projection  of  L  in  (S,K,t)  or 
(R,K,t)  Space  e 


Then,  the  volume  of  the  system  locus  can  be 
computed  analytically 


V, (L  )  =  0.131  X  10 
1  s 


-2 


The  volume  of  the  intersection  of  the  system 
and  mission  loci  can  also  be  computed  analyt¬ 
ically 

V,  (L  n  VJ  =  0.201  x  io-3 
Is  t 


plied  to  the  second  network  and  a  measure 
of  effectiveness  obtained.  Comparison  be¬ 
tween  the  two  networks  using  the  effective¬ 
ness  measures  (as  well  as  the  attributes) 
would  be  straightforward  because  both  the 
attributes  and  the  measures  of  effectiveness 
are  commensurate . 

CONCLUSIONS 


A  class  of  measures  based  on  volumetric 
comparisons  is  one  defined  by 

V//J/  w(S,R,K,t)  dS  dR  dK  dt 

Let 

w(S,R,K,t)  =  (S+R)  K 

Then  the  system  locus  measure  can  be  computed 
analytically 

V  (L  )  =  0.516  x  io-3 
2  s 

while  the  measure  of  the  intersection  is 
computed  numerically 

V  (L  OL  )  =  0.106  x  IO-3 
2  s  m 


A  new  approach  for  assessing  the  effective¬ 
ness  of  C3  systems  has  been  presented.  The 
key  idea  is  to  relate,  in  a  quantitative 
way,  the  capabilities  of  a  C3  system  to  the 
requirements  of  the  mission (s)  that  the 
military  unit  or  organization  has  been  as¬ 
signed  to  execute.  Each  step  of  the  metho¬ 
dology  (specification  of  system  and  mission 
primitives,  definition  of  attributes,  model¬ 
ing  the  system  and  the  mission,  constructing 
the  two  loci)  brings  into  sharper  focus 
qualitative  information  on  what  the  system 
is  intended  to  do,  where  it  is  intended  to 
be  used,  and  how  it  is  intended  to  be  used. 
Posing  and  addressing  these  questions  is 
essential  for  assessing  C3  systems  which 
are  complex,  often  large  scale,  service 
delivery  systems. 


The  partial  measures  of  effectiveness  are 
computed  according  to  eq.  (6) : 


0.201  x  10 
0.131  x  10' 


0.15 


0.106  x  10 
0.516  x  10 


0.205 


Step  7:  Systems  Effectiveness 

The  two  partial  measures,  E^  and  E^ ,  can  be 
combined  into  a  global  measure  of  system 
effectiveness.  First,  however,  the  measures 
E .  should  be  mapped  to  the  measures  E .  that 
range  from  zero  to  infinity.  The  function 
used  is 


£  =  tan 


2L 

2 


E 
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